Tighten posture self-check honesty

[SSBrouhard]

Summary

• make path-isolation checks UNKNOWN unless the operator explicitly supplies agent-readable roots with --agent-root
• require explicit no-direct-bypass attestation plus evidence reference before direct_gmail_bypass can PASS
• keep hard_enforcement_ready reachable only when every check passes, including attested bypass closure
• document the self-check boundary in README and deployment runbook

Validation

• .venv/bin/python -m pytest -q
• .venv/bin/python -m compileall src tests scripts integrations
• .venv/bin/python scripts/vmga_release_check.py
• npm test && npm run plugin:validate (integrations/openclaw)
• manual local posture smoke without --agent-root shows path checks as UNKNOWN